SEC-2404: CsrfAuthenticationStrategy creates new valid CsrfToken